Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> It does help with the authenticating password over insecure connection

I'm not sure you understand what SRP is; it's built to be used over insecure connections.

> It doesn't solve the problem of securely storing passwords; the value that is stored can be brute forced to get password and is equivalent to cleartext password for any SRP using site.

I don't think you understand what SRP is; if you could do this, then public key crypto has a much larger problem then passwords and you should be worried about TLS as well.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: